Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.223 Home All releases ←olderv2.1.222 v2.1.224newer→
Claude Code v2.1.223

Policy-settings environment stripping is case-insensitive

You'll notice
Useful3 Signal0
Permissions

Environment variables your org policy blocks can no longer sneak through by changing their capitalization.

ANTHROPIC_UNIX_SOCKETNO_COLORFORCE_COLOR
What

Environment variables that policy settings are meant to strip can no longer be smuggled through by changing their case.

Details
  • the ANTHROPIC_UNIX_SOCKET-related stripping moved from destructuring fixed key names to an uppercase set lookup, and NO_COLOR/FORCE_COLOR handling did the same
  • per-helper env allowlists were introduced for apiKeyHelper, awsAuthRefresh, awsCredentialExport and gcpAuthRefresh, plus a list of OTel logging variables
Evidence

ANTHROPIC_BEDROCK_MANTLE_BASE_URL

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.223 →